==========================================================================
Ubuntu Security Notice USN-3282-2
May 16, 2017

FreeType vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 LTS

Summary:

FreeType could be made to crash or run programs if it opened a specially
crafted font file.

Software Description:
– freetype: FreeType 2 is a font engine library

Details:

It was discovered that FreeType did not correctly handle certain malformed
font files. If a user were tricked into using a specially crafted font
file, a remote attacker could cause FreeType to crash, resulting in a
denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libfreetype6                    2.4.8-1ubuntu2.6

After a standard system update you need to restart your session to make
all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-3282-2
  http://www.ubuntu.com/usn/usn-3282-1
  CVE-2017-8105, CVE-2017-8287

Package Information:
  https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.6—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=e5GX
—–END PGP SIGNATURE—–
—